Date Published: January 10, 2023
Comments Due: March 24, 2023
Email Comments to: piv_comments@nist.gov
, ,
This publication complements FIPS 201-3, which defines the requirements and characteristics of government-wide interoperable identity credentials used by federal employees and contractors. The draft guidelines in SP 800-217 provide technical requirements on the use of federated PIV identity and the use of assertions to implement PIV federations backed by PIV identity accounts and PIV credentials.
Submit public comments by 11:59 PM ET on March 24, 2023 to piv_comments@nist.gov. We encourage you to use this comment template.
See the Note to Reviewers below for specific topics about which NIST is seeking your feedback. NIST will review all comments and make them available on this website.
NOTE: A call for patent claims is included on page iii of this draft. For additional information, see the Information Technology Laboratory (ITL) Patent Policy – Inclusion of Patents in ITL Publications.
The family of PIV credentials includes a variety of form factors and authenticator types – as envisioned in OMB Memoranda M-19-22 and M-22-09 and subsequently outlined in FIPS 201-3. The cross-domain and interagency use of these credentials is provided by federation protocols outlined in this public draft SP 800-217 Guidelines for PIV Federation. The companion document, SP 800-157r1 Guidelines for Derived PIV Credentials, details the authenticators themselves. Both documents are closely aligned with draft release SP 800-63-4 Digital Identity Guidelines. NIST hopes that the draft document enable a close alignment with new and emerging digital identity and federation technologies employed in the federal government, while maintaining a strong security posture.
NIST is specifically interested in comments on and recommendations for the following topics:
Identification and Authentication
Publication:
SP 800-217 (Draft) (DOI)
Local Download
Supplemental Material:
Comment template (xls)
Virtual workshop (Feb. 1, 2023) (web)
Related NIST Publications:
Document History:
01/10/23: SP 800-217 (Draft)
Security and Privacy
authentication; Personal Identity Verification; public key infrastructure